Finding Multiple IDORs and a service_role key in Supabase Requests

Dec 7, 2025 · 3 min read · I had my computer on while watching Sunday Night Football with Caido and Firefox open. I didn’t know what I was looking for, but I needed to check my medical provider’s website to find a FedEx tracking number. Curiosity won, so I jumped into Caido to...